125.35.0.142
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Department of Publicity of the Central Committee of the CPC
- Usage Type
- Fixed Line ISP
- ASN
- AS4808
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Beijing, Beijing
Abuse Reports
Total reports
24 from
17 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 49445 [1] TCP
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 10007)
Source port: 7127
TTL: 225
Packet length: 44
TOS: 0x00
This report (for 125.35.0.142) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 6379 (Redis) on a host running no such service. Automated port-scan detection at 2026-11-06T20:15:19Z.
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇩🇪 EGP Abuse Dept |
Scanning for port/service exploits on tpc-054.mach3builders.nl
|
Port Scan Hacking | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 8255 [1] TCP
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 7760 [1] TCP
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 7007 [1] TCP
|
Port Scan | |
| 🇵🇱 mkey |
[First: 2026-10-30 14:01:57/single] HITS=1 Repeated suspicious IDS-detected activity; sample=Attempting to connect to a forbidden port
|
Port Scan Hacking Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 9518
GET /
Accept: */*; 9518 [1] TCP
|
Web App Attack | |
| Anonymous |
Blocked by UFW [9192/tcp] | SPT: 3563 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 8510
GET /
Accept: */*; 8510 [1] TCP
|
Web App Attack | |
| 🇺🇸 avgsmoe |
Connection to a honeypot port. Automated report (firemon).
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (15 bytes of payload); 7788 [1] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown